Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/540596f0-9307-3790-aa83-d41357ea8ddf.roa
File:                     540596f0-9307-3790-aa83-d41357ea8ddf.roa (raw, json)
Hash identifier:          6ThrsGcC24TfTUFfL8UnqMUhgyauVYMgZz/aNnzP294=
Subject key identifier:   6F:5A:CF:73:BD:BF:38:CE:F0:A7:0B:44:B2:D5:62:70:89:01:DB:53
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD818E10362AF8FB38680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/540596f0-9307-3790-aa83-d41357ea8ddf.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.159.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d8:18:e1:03:62:af:8f:b3:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fe962424-2e08-476b-aeae-393632e42cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:89:8e:a4:84:e3:37:0e:fe:db:c6:b4:64:
                    fd:24:6d:b3:68:da:b8:fc:13:75:92:8d:6b:26:27:
                    68:72:9c:fa:ad:a9:82:ec:65:32:c4:bf:ad:aa:77:
                    d4:07:a0:bb:b7:07:ef:a6:ba:c9:41:d3:9f:92:f2:
                    09:19:6f:5e:c2:4c:11:65:2d:05:00:78:4d:02:fd:
                    e6:50:ac:cc:9f:6d:6b:2f:d0:8d:ad:78:3c:06:3e:
                    b6:8c:1e:cb:a2:ef:9d:bf:31:e9:71:20:44:cd:79:
                    74:8b:8d:4d:a1:bd:c3:73:4f:03:fe:ae:9d:ba:30:
                    51:b5:8a:e2:07:97:f7:2f:c7:7c:b4:ba:8b:88:e3:
                    39:dc:9f:4e:8f:da:75:71:79:ec:fd:42:92:58:e3:
                    de:95:6c:ea:1f:56:20:51:06:77:b6:67:46:cd:67:
                    dd:16:c8:a6:7b:a1:78:4e:92:8e:4c:ea:86:f8:88:
                    e3:88:1a:97:28:e5:05:af:2c:10:ee:d6:f9:74:0a:
                    54:ff:1e:dc:fc:fa:a3:ac:c4:44:ad:67:73:9b:27:
                    d8:9e:65:43:b6:9c:b6:c3:b1:04:f7:09:11:a6:3c:
                    d6:cb:df:8b:eb:17:3a:6b:13:f2:af:cf:54:59:41:
                    8d:ce:eb:07:54:e9:f6:4c:ad:09:e8:bf:90:9f:d7:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5A:CF:73:BD:BF:38:CE:F0:A7:0B:44:B2:D5:62:70:89:01:DB:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/540596f0-9307-3790-aa83-d41357ea8ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:b2:d7:37:6e:23:01:ca:a6:83:cd:56:df:05:b8:ec:85:
         48:1e:a6:01:9b:e5:ad:d1:aa:c4:15:a9:05:d2:50:53:87:44:
         a8:2c:9b:0b:ac:a7:d1:40:0f:7d:53:34:d3:cb:72:22:18:57:
         80:99:59:9c:52:bd:68:53:f1:83:e8:20:f8:cd:bb:c8:05:9c:
         88:15:9d:0d:aa:35:42:6c:35:24:53:7f:2a:f8:77:3d:d4:19:
         1f:28:9e:cb:93:47:17:13:e7:d6:da:4d:e4:b6:ae:ca:9d:d9:
         71:c2:01:48:2c:c6:10:b4:89:c2:51:c1:cc:c6:54:38:98:b4:
         64:2e:7d:ab:c8:88:42:20:c5:f2:17:9d:4d:7b:9d:7b:6e:fd:
         f2:d6:ac:85:9b:c7:ef:69:aa:fd:ba:2a:db:4b:0a:d4:04:b2:
         30:d8:45:f7:30:69:11:2c:c4:4a:28:8e:9a:5d:d8:e1:90:59:
         22:ad:f9:c3:21:83:69:91:c5:7b:29:71:c9:85:82:7b:20:37:
         38:b7:bf:db:e2:24:53:d4:16:ee:bc:11:a6:a1:47:fd:17:c1:
         a8:c1:95:cc:47:b5:47:7e:ac:78:6e:e1:9b:1e:19:63:66:72:
         b4:5e:bc:ef:19:fa:c6:1f:f5:cb:70:be:2d:5d:07:10:f5:bd:
         50:1d:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:34:15 2025 by rpki-client